CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught

CISA and the FBI warn that threat actors are chaining several Ivanti Cloud Service Appliance vulnerabilities (including CVE-2024-8963, CVE-2024-9379, CVE-2024-8190, and CVE-2024-9380) to achieve admin bypass, SQL injection and remote code execution, enabling credential theft and web shell deployment; agencies recommend upgrading to the latest Ivanti CSA, using published IoCs and detection methods to search for compromise, quarantining/reimaging affected hosts, rotating credentials, and reporting incidents to CISA.